Bug: "Failed to fetch ESM Apt Cache item" due to AppArmor blocking DNS resolution

[BHSPitMonkey]

Description of the bug

In my Ubuntu 24.04 system, I see the following in logs:

["2024-07-08T09:02:09.869", "WARNING", "ubuntupro.apt", "fail", 907, "Failed to fetch ESM Apt Cache item: https://esm.ubuntu.com/apps/ubuntu/dists/noble-apps-security/InRelease", {}]
audit: type=1400 audit(1720454539.878:3861): apparmor="DENIED" operation="connect" class="file" profile="ubuntu_pro_esm_cache//apt_methods" name="/run/systemd/resolve/io.systemd.Resolve" pid=3341159 comm="https" requested_mask="wr" denied_mask="wr" fsuid=105 ouid=101

Note that the apt_methods profile lacks permission to /run/systemd/** while some of the other profiles there have it.

Expected behavior

No ESM fetch failures in logs when the network is online.

Current behavior

ESM fetch failures show up in logs.

To Reproduce

This happens every time I apt update.

System information:

• Ubuntu release: 24.04 LTS (Noble Numbat)
• Pro Client version: 32.3.1~24.04

[orndorffgrant]

Thank you @BHSPitMonkey for the bug report! And sorry for the delay in responding.

I'm unable to reproduce this in a fresh 24.04 VM. Do you have any custom systemd-resolve DNS settings that may cause different behavior?